Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Jonas Schäfer

@jssfr.zombofant.net.ap.brid.gy
6 followers 0 following 135 posts

By day, #devops CTO for the Cloud business at Cloud&Heat in Germany. By night, #xmpp #electronics #embedded #penandpaper #rpg #photography. My photography related alt […] 🌉 bridged from ⁂ zombofant.net/@jssfr, follow @ap.brid.gy to interact

PostsRepliesMedia
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 14/10/2026
@wdormann "well… about that…" 😁
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 07/10/2026
A lightning strike causes a really loud bang (impulse). A thunderclap is thus the impulse response of the entire surrounding landscape. Soo… if you take a clean recording of a thunderclap and feed it into a reverb, you get a sound as if your audio was being played *really loud* in that […]
zombofant.net
Original post on zombofant.net
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 07/10/2026
#TIL autoeq.app , into which you can throw a CSV file with a frequency response (two columns: frequency, gain in dB) to calculate an EQ to flatten (or match to another frequency response) it. In completely unrelated news, the cheap speakers in the dining room now sound much better.
autoeq.app
AutoEq
Automatic headphone equalization
010 1
Reposted by Jonas Schäfer
petur 😶🇺🇦🇵🇸🇹🇼 @peturdainn.mastodon.social.ap.brid.gy · 04/10/2026
Firefox about:config browser.nova.enabled = false you can fuck right off with your fucking ugly rounding, firefox </rant>
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 04/10/2026
If you hate AI as much as I do, you probably have an arsenal of arguments you bring up with AI believers. The past (half) year, however, changed the AI landscape significantly and everyone opposing AI needs to realize this. I wrote this blog post to illustrate it, but the summary is in the […]
zombofant.net
Original post on zombofant.net
001 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 03/10/2026
What was going on here: the MLD frames were sent with an IPv6 hop-by-hop (HBH) option field, which isn't caught by the `icmp6` filter in tcpdump. Coincidentally, for the same reason (that extra option) multicast was broken in the LAN because all my devices (incorrectly) filter for `ip6 nexthdr […]
zombofant.net
Original post on zombofant.net
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 03/10/2026
So uh, `tcpdump -enni eth1 icmp6` does not show MLD messages (which are ICMPv6 message)? A simultaneously-running wireshark sees them. What's going on there?
100 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 25/09/2026
Also, podman-restart.service, seriously? I need to sleep over this, but unless I'm reading this wrong, the version as of March 16th would stop all podman containers whenever I close a shell owned by root? (modulo the time it takes for the user@0.service to be shut down) That… can't be right. I […]
zombofant.net
Original post on zombofant.net
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 25/09/2026
gnome-keyring, not even once. (brought to you by a week of troubleshooting why kmail won't log in anymore and be unable to set passwords and why gajim would freeze at start)
000 0
Reposted by Jonas Schäfer
Daniel Gultsch @daniel.gultsch.social · 24/09/2026
Conversations is now permanently available for free on Google Play. Google doesn’t deserve me and my money anymore. gultsch.de/posts/breaking-up-with-g… #XMPP #Jabber #Conversations_im #Android #FOSS #OpenSource #Google #GooglePlay
gultsch.de
Breaking Up with Google Play: Why Conversations Is Now Free
Conversations, my federated instant messaging client for Android, started out as many traditional open-source projects do: as an attempt to scratch my own itch. Development started in January 2014 in my student dormitory, and within weeks I started dogfooding and using the client as the primary means of communicating with my friends. However, when it came to releasing the app to the public on March 24, 2014—exactly twelve and a half years ago today—it was immediately clear to me that I would at least try to turn my open-source project into a business. While I didn’t invent the business model of making the source code publicly available but charging for the convenience of a compiled binary, it was certainly unusual in 2014.
0622 22
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 19/09/2026
Days since I spent way too long debugging why a wifi device would not connect because the AP used channel 13: 0.
001 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 15/09/2026
Old and busted: Power-over-ethernet. New hotness: powering your switch from your router's USB port using a home-soldered USB-A -> barrel jack adapter cable.
Photograph of two network devices. To the left is a Mikrotik access point, powered through a black cable coming in from below. To the right is a Netgear ethernet switch. The two devices are connected with a yellow ethernet cable, and the Netgear switch is also connected with another ethernet cable which leaves the frame at the bottom. The Mikrotik is powered through a black cable coming in from below. On the top side of the Mikrotik, an USB-A cable is plugged which plugs into the back side of the Netgear switch, acting as power source.
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 31/08/2026
Rabbit hole depth: Researching how to implement a PostgreSQL trigger to capture changes to NextCloud's `oc_share` table…
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 30/08/2026
After watching www.youtube.com/watch?v=UTvr8L5v8u8 by @bennjordan , I guess I need to do something with the months of time series I have from the accelerometer running at 200 Hz sample rate on my balcony, just to see what I'll find. The data has gaps, sometimes hour-long gaps (because […]
zombofant.net
Original post on zombofant.net
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 19/08/2026
@b0rk `ServerAliveInterval 30` and `VerifyHostKeyDNS yes`.
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 17/08/2026
Okay, to illustrate. All of the attached pictures are Starlink or other sattelites, none are shooting stars. How do I know? I took series pictures and I can see the object moving through the frames. It's the only way to know, as you can see in the 3rd and 4th […] [Original post on zombofant.net]
Fragment of a photo of a dark sky. In the center, there's a brighter diagonal line.Fragment of a photograph of a dark sky. In the middle, there's a slightly green-ish brighter line.Fragment of a dark sky photograph. In the center, there is a line which gets progressively brighter on one end.Fragment of a dark sky photograph. In the center, there is a bright line which gets progressively brighter toward the top.
010 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 15/08/2026
Furthermore, I think that Starlink must be destroyed. #AstroPhotography
110 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 09/08/2026
Besides forcing me to go through an account recovery procedure which involves sharing my mobile number they don't know (because I don't have a google account on my phone) to "verify that it's [me]", they also suggest that I scan my laptop for malware, because that's where the "suspicious […]
zombofant.net
Original post on zombofant.net
001 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 09/08/2026
Wow. Google. I have a google account, had it for quite a while. I've been passively signed into it for reasons. I stumble across a YouTube Channel which does acoustic covers of awesome computer game sound tracks. For the first time ever, I hit the subscribe button, because they get waaaay too […]
zombofant.net
Original post on zombofant.net
100 1
Reposted by Jonas Schäfer
Rairii :win3_progman: :win3: @rairii.labyrinth.zone.ap.brid.gy · 04/08/2026
i didn’t think it was physically possible, but there’s finally something worse than `curl | sh`
Install with an AI agent (recommended)

The fastest way to get ghidrasql running end-to-end is to point an AI coding agent (Claude Code, Cursor, Codex, Aider, etc.) at the bundled installer prompt:

(link to install-prompt.md)
16245280 280
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 31/07/2026
If your graphics drivers are older than your graphics card, performance is going to be bad. Or, put differently: If you run #Steam on #Linux in #Flatpak: run `flatpak update` once in a while to update Mesa for Steam.
010 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 31/07/2026
Ohai hackernews crowd. I thought that post had tanked when it dropped out of New at one vote.
Screenshot of two line charts showing data of the past seven days. The top one shows "request rate" in requests per second. At around midnight of the 31st of July, the line rises sharply from around zero to 6, then falling of slightly to 2.5. The bottom one shows "egress traffic" in mebibytes per second. The line has a similar pattern, but peaks at 3 MiB/s.
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 29/07/2026
And it's not the adder I built in a chain for `meta mark`, but the huge map containing video data.
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 29/07/2026
Got it, delete then reinsert works. Also, nft(1) is now core dumping on `nft list ruleset`.
100 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 29/07/2026
How am I supposed to implement vsync then (yes, this is as cursed as it sounds)?
101 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 29/07/2026
Hrm. nftables dynamic maps can insert keys from the packet path, but not update the value after it has been inserted? That seems … unfair.
101 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 27/07/2026
As a follow-up to my recent nftables/traceroute shenanigans, I could not resist to do this: Bad Apple!! but it's traceroute jssfr.de/2026-07-27-bad-apple-but-t…
jssfr.de
Bad Apple!! but it's traceroute
This was unavoidable, given my post from the other day about how to make traceroute display (almost) arbitrary strings.
012 2
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 25/07/2026
As a follow up to this morning's nftables remark, I present to you: Messing with Traceroute. A deep dive of how this common debugging tool works and how you can make it display (almost) arbitrary content. jssfr.de/2026-07-25-messing-with-tr…
jssfr.de
Messing with Traceroute
Traceroute is fun tool to investigate how packets travel through the internet. Due to how it's made, we can make traceroute tools show (almost) arbitrary poems. This blog post gives you an idea how.
011 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 25/07/2026
I find it a bit offensive that nftables does not recalculate the inner packet's (in an error response) check sums when you mangle the data inside it 🙃
000 0
Reposted by Jonas Schäfer
Ge0rG @ge0rg.chaos.social.ap.brid.gy · 17/07/2026
Happy World Emoji Day! I was so preoccupied with whether I could, I did not think whether I should. ḧ̴͖́e̷͚̿-̸̧͘c̴͖͌o̴̻̊m̷͕̂e̷͔͊t̷͚̊h̵̦… Uncursed URL: op-co.de/blog/posts/emoji_xmpp_addr… Three weeks in the making. 22 years of standardization. 19 RFCs. 17 Unicode […]
chaos.social
Original post on chaos.social
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 17/07/2026
@ge0rg I'm in that picture!
001 1
Reposted by Jonas Schäfer
Ge0rG @ge0rg.chaos.social.ap.brid.gy · 17/07/2026
So, today I enrolled in #dn42, configured a dedicated VRF on my #MikroTik RB4011, ran into a bug where re-using the same link-local #IPv6 address on multiple tunnels resulted in wrong egress routing, got #BGP set up, and even managed to port-forward iperf from […] [Original post on chaos.social]
Screenshot from the RouterOS WinBox UI, showing a list of dynamic IPv6 ULA routes
101 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 14/07/2026
Thank glob for photorec.
010 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 11/07/2026
Or, looking at one of those gigawatts AI DC projects: For a 20 GW datacenter, you'd end up with between 300 and 900 squareKILOmeters of solar cells, which is somewhere between the Island of Malta and the city of Berlin, depending on how well-positioned they are. This is excluding extra energy […]
zombofant.net
Original post on zombofant.net
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 11/07/2026
Back-of-the-envelope calculation: depending on whom you ask, a rack of AI hardware needs between 10 kW and 20 kW of power. A rack of AI hardware has a footprint of maybe a bit less than 1 m². The amount of energy the sun delivers per year per square meter ranges between 1 MWh and 2.5 MWh. 20% […]
zombofant.net
Original post on zombofant.net
100 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 10/07/2026
When you make a sarcastic comment about a likely vibe-coded project and the comment gets fav'd by all the wrong people. 😬
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 29/06/2026
"Post pending" is Mastodon's "This message was not encrypted for your device".
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 29/06/2026
Hat jemand eine Empfehlung für ein vegetarierkompatibles Restaurant in #Köln in Laufreichweite vom Hauptbahnhof wo man am Donnerstag gut zu Mittag essen könnte? Von asiatisch bis Burger ist alles gut. Bitte Boosten in eure Köln-Bubbles. Sonst muss ich weiter OpenStreetMap abgrasen.
101 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 27/06/2026
To add insult to injury, the mpd/libnfs14 crash does not occur on vanilla Debian (so I cannot reportbug it). Well, on the plus side … I can just use nfs://127.0.0.1 on the NAS to sidestep the io_uring bug. That is crazily inefficient, but at least nothing crashes or gets stuck….
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 27/06/2026
#Linux UX root cause analysis I cannot play the new album I bought on the living room speakers, because mpd on Raspbian trixie crashes when updating the libnfs-mounted database, because of some bug in libnfs14 or how mpd in stable uses libnfs14. I cannot use a kernel-based nfs mountpoint […]
zombofant.net
Original post on zombofant.net
101 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 26/06/2026
#Windows UX is being great again. On the Windows laptop here, Windows showed a popup about potentially dangerous software. Clicking it gets you into the Windows Security "app". There's then a list of files it doesn't like. When you click on a file, you get an UAC prompt telling you "This app […]
zombofant.net
Original post on zombofant.net
001 1
Reposted by Jonas Schäfer
Ge0rG @ge0rg.chaos.social.ap.brid.gy · 23/06/2026
From the "Pivot to woodworking" department #InfoSec #ShitPost #DevOps #Logs #VennDiagram
Venn diagram:
left: forest ranger
right: devops engineer
middle: looking for bugs in logs
414114 114
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 21/06/2026
@spielleitung Huhu! Könnt ihr mal gucken ob mit dem Captcha auf vernissage.pnpde.social alles in Ordnung ist? Verwandtschaft versucht gerade, sich dort ein Konto anzulegen und scheitert seit einer halben Stunde am Captcha...
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 21/06/2026
@Migueldeicaza @glyph If I'm reading that correctly, that's 256 *gigs*, not *megs* of VRAM. And in which world is that a "consumer grade GPU"? My favourite IT retailer's filter ends at 96 GB, which is more than any non-server machine I ever owned has in total RAM.
010 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 10/06/2026
Days since software misbehaved because with specific TCP segmentation patterns: 0
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 06/06/2026
@ring2 Sieht geil aus. *Auf die Lasagne wart, die im Ofen bäckt*
000 0
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 30/05/2026
TIL: systemd-modules-load.service, available e.g. on Debian trixie, which allows to load a set of kernel modules during (mid-)early boot, using textfiles in /etc/modules-load.d/. Combined with: ``` [Unit] Description=Hardening: disable late loading of kernel modules Wants=network-pre.target […]
zombofant.net
Original post on zombofant.net
001 1
Reposted by Jonas Schäfer
Glyph @glyph.im · 30/05/2026
Real talk: the real "supply chain risk" is that you treat your open source "supply chain" like shit and assume that we will all take any amount of abuse from you and just keep doing volunteer labor forever without ever complaining. And, equally real talk: most of us—myself included—actually do […]
mastodon.social
Original post on mastodon.social
2426 26
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 29/05/2026
Meme image calling to acton: "Harden all the things!"
001 1
Jonas Schäfer @jssfr.zombofant.net.ap.brid.gy · 28/05/2026
If you are running OpenStack, CVE-2026-42999 and others just dropped: bugs.launchpad.net/keystone/+bug/21… This one is really nasty and you'll want to patch ASAP. #OpenStack #Security
bugs.launchpad.net
Bug #2148398 “RBAC Policy Target Injection via JSON Request Body...” : Bugs : OpenStack Identity (keystone)
In keystone/common/rbac_enforcer/enforcer.py at line 478-479, the enforce_call method unconditionally merges the raw JSON request body into the policy enforcement dictionary after trusted target data has been set from the database: json_input = flask.request.get_json(force=True, silent=True) or {} policy_dict.update(json_input.copy()) The get_json call uses force=True, which means JSON parsing happens regardless of the Content-Type header or HTTP method (including GET, HEAD, DELETE). The ...
000 0